$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/3b85c60a-f238-3bee-8a62-41268a4cc28b.roa File: 3b85c60a-f238-3bee-8a62-41268a4cc28b.roa (raw, json) Hash identifier: KhdjXGiX8M9C5ybrvrCqs7aFpQAVv6FBVZc8f6BZzUk= Subject key identifier: AB:1A:A4:C7:68:C4:48:E8:E8:DD:79:BD:AA:99:7E:29:E2:AC:F3:7C Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584898D6071F1328108F739CC480 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/3b85c60a-f238-3bee-8a62-41268a4cc28b.roa Signing time: Sun 19 Jan 2025 14:00:52 +0000 ROA not before: Sun 19 Jan 2025 14:00:52 +0000 ROA not after: Sat 19 Apr 2025 13:00:52 +0000 asID: 203724 IP address blocks: 161.69.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:98:d6:07:1f:13:28:10:8f:73:9c:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Jan 19 14:00:52 2025 GMT Not After : Apr 19 13:00:52 2025 GMT Subject: CN=a0177403-c840-412d-a298-8a61c1126681 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:bb:50:d2:4c:16:0f:45:e1:e0:16:a9:00:8c: 39:b7:ac:10:4a:19:0d:9a:7e:f8:c4:01:a1:3a:0f: 7a:3c:69:b7:ca:89:d5:f4:97:0a:fc:f0:e3:34:5e: c7:28:64:66:3d:20:b4:03:b9:36:79:49:5f:d0:85: d8:b5:62:96:22:95:99:41:2c:12:6f:05:62:92:13: de:90:64:81:d4:99:f6:67:7b:3f:1f:b0:f0:df:96: 36:3c:50:c2:f0:e4:9e:83:4b:50:75:4b:db:56:1d: dd:b0:65:60:3c:2e:db:d7:a4:92:1b:a2:3f:57:06: 41:3a:38:d9:33:ac:6f:63:54:db:1b:c6:40:a6:fe: f6:aa:67:47:99:30:7e:4c:3e:27:12:cc:eb:c7:62: e0:12:e9:65:50:c6:ec:f8:61:45:38:27:af:76:2a: c4:97:8d:32:b3:e4:9e:57:c9:5e:eb:de:9e:cb:8f: 0f:8b:68:a7:ad:47:ae:43:34:ee:17:0e:5a:89:11: 7b:01:c4:0f:a1:36:cd:9a:1f:49:36:06:34:76:01: bf:20:f4:12:69:d3:d0:5c:c0:56:da:e0:fc:72:0e: 46:02:e3:1f:cf:95:9b:d8:11:dc:8d:7d:44:d0:f8: 60:da:44:e7:3d:f6:aa:db:09:64:c2:a1:41:a2:d6: b1:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:1A:A4:C7:68:C4:48:E8:E8:DD:79:BD:AA:99:7E:29:E2:AC:F3:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/3b85c60a-f238-3bee-8a62-41268a4cc28b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:59:c5:07:a2:4a:c4:9e:11:c8:b7:84:23:08:56:5d:49:e8: 4d:c3:79:28:2d:1a:ea:07:87:6d:b5:14:a0:9b:73:4b:81:fb: 80:89:75:3d:c9:d6:36:21:8a:ff:60:0f:58:d6:a3:bd:5b:e4: a6:cc:8b:29:7d:e4:8c:34:cb:48:ef:30:36:c0:b0:4d:cb:f7: 18:ca:78:c1:83:09:fe:3f:d8:28:1f:b7:9d:63:3c:20:a2:f0: f9:41:72:4f:fd:af:a4:0a:fa:40:90:c5:2e:ec:7a:cb:7c:85: 08:7f:07:e7:38:07:52:c6:2a:c1:5e:21:32:91:ba:ff:06:37: 28:5a:f7:0b:00:6a:af:eb:8f:33:f6:ea:24:59:10:e4:88:40: 97:2f:f2:07:c8:bb:67:62:26:6d:8e:36:47:e2:be:f8:28:e3: b2:37:d0:7d:8d:3d:92:13:6f:21:45:04:1f:0d:95:54:8e:93: 5d:b3:37:a3:1e:db:0a:eb:ef:3b:fc:83:d2:77:b9:bb:32:97: 56:84:64:6b:60:2b:a6:14:31:5e:31:f9:0e:1d:59:c5:72:d4: 08:5b:47:21:1a:a6:3b:39:17:f1:ce:2f:92:9d:54:1e:cc:a3: 32:da:62:2d:12:a9:fe:c3:b3:b8:bd:27:9b:3b:d8:c8:af:b0: f5:2a:92:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiY1gcfEygQj3OcxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDExOTE0MDA1MloXDTI1MDQxOTEzMDA1MlowLzEtMCsGA1UEAxMk YTAxNzc0MDMtYzg0MC00MTJkLWEyOTgtOGE2MWMxMTI2NjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7tQ0kwWD0Xh4BapAIw5t6wQShkNmn74xAGh Og96PGm3yonV9JcK/PDjNF7HKGRmPSC0A7k2eUlf0IXYtWKWIpWZQSwSbwVikhPe kGSB1Jn2Z3s/H7Dw35Y2PFDC8OSeg0tQdUvbVh3dsGVgPC7b16SSG6I/VwZBOjjZ M6xvY1TbG8ZApv72qmdHmTB+TD4nEszrx2LgEullUMbs+GFFOCevdirEl40ys+Se V8le696ey48Pi2inrUeuQzTuFw5aiRF7AcQPoTbNmh9JNgY0dgG/IPQSadPQXMBW 2uD8cg5GAuMfz5Wb2BHcjX1E0Phg2kTnPfaq2wlkwqFBotaxhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKsapMdoxEjo6N15vaqZfinirPN8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvM2I4NWM2MGEtZjIzOC0z YmVlLThhNjItNDEyNjhhNGNjMjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUVrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFxZxQeiSsSeEci3hCMIVl1J6E3DeSgtGuoHh221FKCbc0uB+4CJdT3J 1jYhiv9gD1jWo71b5KbMiyl95Iw0y0jvMDbAsE3L9xjKeMGDCf4/2Cgft51jPCCi 8PlBck/9r6QK+kCQxS7sest8hQh/B+c4B1LGKsFeITKRuv8GNyha9wsAaq/rjzP2 6iRZEOSIQJcv8gfIu2diJm2ONkfivvgo47I30H2NPZITbyFFBB8NlVSOk12zN6Me 2wrr7zv8g9J3ubsyl1aEZGtgK6YUMV4x+Q4dWcVy1AhbRyEapjs5F/HOL5KdVB7M ozLaYi0Sqf7Ds7i9J5s72MivsPUqknQ= -----END CERTIFICATE-----Generated at Sat Apr 5 13:08:12 2025 by rpki-client